Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e55563-ccf7-4e79-a3e9-7adbd2136ac1/1/45F2xaYCUnUzwrVBQGroPyCeYgw.mft
File:                     45F2xaYCUnUzwrVBQGroPyCeYgw.mft (raw, json)
Hash identifier:          INr/FLglSbYqWtW6l++8bXq06EDgVIpOuBdW7gbfnKY=
Subject key identifier:   07:55:09:B4:F2:F4:8B:06:8F:09:5A:17:78:61:1B:93:14:F4:3A:3B
Authority key identifier: E3:91:76:C5:A6:02:52:75:33:C2:B5:41:40:6A:E8:3F:20:9E:62:0C
Certificate issuer:       /CN=e39176c5a602527533c2b541406ae83f209e620c
Certificate serial:       018D637803C71F4947DF72AC000D09EC182B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/45F2xaYCUnUzwrVBQGroPyCeYgw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/e55563-ccf7-4e79-a3e9-7adbd2136ac1/1/45F2xaYCUnUzwrVBQGroPyCeYgw.mft
Manifest number:          0852
Signing time:             Thu 01 Feb 2024 07:00:26 +0000
Manifest this update:     Thu 01 Feb 2024 07:00:26 +0000
Manifest next update:     Fri 02 Feb 2024 07:00:26 +0000
Files and hashes:         1: 45F2xaYCUnUzwrVBQGroPyCeYgw.crl (hash: +eBmeIr2pSE2IBM05oAFpztD9kiII+IqluXQJ/QGo6k=)
                          2: IB5idwM_jcdlVOrHBrVRqBiT7-8.roa (hash: znKTXgvA8sVgLZvO2fSz3ukLWUAirlYVFiOedYdA8II=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:63:78:03:c7:1f:49:47:df:72:ac:00:0d:09:ec:18:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39176c5a602527533c2b541406ae83f209e620c
        Validity
            Not Before: Feb  1 07:00:26 2024 GMT
            Not After : Feb  2 07:00:26 2024 GMT
        Subject: CN=075509b4f2f48b068f095a1778611b9314f43a3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:26:d5:71:9d:6a:57:64:94:68:c3:71:83:07:
                    eb:b5:43:e2:2b:0c:2d:a2:1c:a7:45:24:ac:12:19:
                    d8:07:d3:f5:c8:b1:9b:37:53:50:01:54:7b:a2:04:
                    55:0a:2e:17:4f:00:aa:4c:2e:55:4f:bc:73:f2:dc:
                    87:3d:bb:ca:c9:a0:0c:dd:de:e4:85:41:9b:a7:33:
                    8f:ea:57:11:dd:60:00:eb:05:13:77:85:c8:37:6c:
                    07:89:94:b2:47:7b:c3:06:8b:60:4d:86:ca:61:4f:
                    93:68:44:39:fd:1f:15:df:92:04:41:a9:c9:d6:c8:
                    1b:88:14:76:94:67:e6:31:02:5a:73:38:82:75:72:
                    13:42:49:e7:f5:bf:db:61:9a:77:4d:4e:f6:18:ce:
                    d0:c4:b4:36:52:d8:81:8b:70:c1:74:a6:6f:32:3d:
                    23:b9:5f:84:38:fc:5b:f8:45:ae:25:41:05:86:8f:
                    42:0e:ac:f5:1a:03:66:e8:ff:c2:8a:69:27:76:e4:
                    26:f2:8a:00:7b:d6:54:11:13:eb:62:d1:f5:da:3c:
                    fe:b3:0d:fc:dd:f7:b2:84:2c:cb:5b:a7:dc:2a:b8:
                    eb:e5:8c:c7:b9:7f:4a:65:b4:52:d8:16:61:02:39:
                    a5:7e:99:8f:ca:66:de:77:89:09:5f:84:a5:78:a6:
                    38:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:55:09:B4:F2:F4:8B:06:8F:09:5A:17:78:61:1B:93:14:F4:3A:3B
            X509v3 Authority Key Identifier:
                keyid:E3:91:76:C5:A6:02:52:75:33:C2:B5:41:40:6A:E8:3F:20:9E:62:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45F2xaYCUnUzwrVBQGroPyCeYgw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e55563-ccf7-4e79-a3e9-7adbd2136ac1/1/45F2xaYCUnUzwrVBQGroPyCeYgw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e55563-ccf7-4e79-a3e9-7adbd2136ac1/1/45F2xaYCUnUzwrVBQGroPyCeYgw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:07:a7:e7:87:fa:cc:62:9c:a3:f5:e5:bb:27:51:a3:45:29:
         c1:5b:ec:94:64:f6:85:43:75:7d:77:00:53:aa:17:ac:c7:43:
         e1:1e:08:bc:d0:dc:2b:c2:6b:16:d9:32:0a:db:8a:12:1b:80:
         8e:17:9a:2d:19:2a:c8:ab:aa:54:86:74:84:e1:32:3d:30:2c:
         32:40:6d:4f:84:97:c6:0f:09:bf:67:cb:5b:0b:5a:02:9b:36:
         0a:bf:70:c1:8d:02:4d:9d:65:30:88:75:bd:ba:6c:4d:cf:80:
         e3:5d:25:2d:4f:7f:42:93:6d:c2:e3:10:51:0b:4a:77:fd:3a:
         20:77:81:03:89:6a:0c:9b:8c:92:4e:0a:2b:61:1e:0d:9e:49:
         50:af:ca:44:e4:9b:f6:0e:fb:f8:04:f8:fd:62:43:15:4b:38:
         4c:86:c7:a6:77:c6:61:5f:47:39:f4:0d:de:e2:a3:8c:6d:34:
         21:0b:c8:be:57:3b:7d:5a:ad:27:6b:37:0b:92:7d:52:fd:fe:
         18:dc:ba:5d:a8:8f:c7:65:db:af:18:ca:cc:8f:2b:af:3b:af:
         0a:73:d4:0c:5c:8f:a3:24:54:52:b6:fc:20:3a:bd:6a:18:26:
         48:f0:6a:d7:29:f1:0f:74:8c:df:66:d2:16:58:cc:9a:e8:6e:
         25:8e:ac:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 1 16:26:10 2024 by rpki-client on console-ams.rpki-client.org